Features

Every feature listed here ships in the product today. No roadmap items, no “coming soon”.

Supported Payment Methods

GatewayChip / PINNFC / TapQR CodeManual
Visa / Mastercard
WeChat Pay
Alipay
UnionPay
CentraPay
EFTPOS
Cash

Multi-Gateway Payments

Accept payments from all major providers in a single terminal.

  • Card (Visa / Mastercard) — chip, PIN, contactless (tap-to-pay)
  • WeChat Pay — QR code scanning
  • Alipay — QR code scanning
  • UnionPay — QR code scanning
  • CentraPay — wallet payments
  • EFTPOS — debit card processing
  • Cash — recording for reconciliation

Tap-to-Pay NFC

One-tap card detection via Sunmi PaySDK or Android NFC adapter.

  • Instant handoff to the Skyzer payment SDK for EMV processing
  • Tip & fee summary dialog shown before charging
  • Configurable idle re-enable watchdog for reliable detection
  • Automatic pause during standby mode to save battery
  • Apple Pay, Google Pay, and physical contactless cards

Smart Payment Routing

Automatic fallback to the next available provider on retriable failures.

  • Each provider declares its capabilities
  • The router selects the best match for every transaction
  • Retry with next provider on timeout or soft-decline
  • Configurable gateway ordering per terminal

Tipping & Fees

Flexible tipping presets and per-gateway surcharge control.

  • Preset percentages — configurable chips (e.g. 10%, 15%, 20%)
  • Custom amount — operator enters an arbitrary tip value
  • No Tip — one-tap skip
  • Global surcharge percentage across all gateways
  • Per-gateway fee overrides (e.g. Visa 1.5%, Alipay 0%)
  • Server can lock fee settings to prevent local modification

Reports & Settlement

Real-time transaction reporting with end-of-day batch settlement.

  • Filterable transaction log with search
  • Per-gateway channel summary
  • Overall revenue summary
  • Settlement reports (end-of-day batching)
  • Detailed view: amounts, fees, tips, auth codes, masked card numbers, timestamps

Receipts & Printing

Sunmi built-in, network, and Bluetooth thermal printers.

  • Structured merchant receipts (header, amounts, totals, auth codes)
  • QR codes and barcodes on receipts
  • Auto-print after successful payment (optional)
  • Configurable paper width (58 mm / 80 mm)
  • ESC/POS protocol over Wi-Fi TCP or Bluetooth

Multi-Terminal Networking

LAN discovery, WebSocket push, and POS Controller mode.

  • Automatic terminal discovery via UDP broadcast + NSD
  • Inter-terminal payment and refund commands over LAN
  • HMAC-signed requests with timestamp validation (anti-replay)
  • STOMP over secure WebSocket for real-time server push
  • POS Controller mode: terminal as peripheral, amount locked by master POS

Server-Driven Configuration

Two-layer config model — root defaults + per-terminal overrides.

  • Root config from the public /endPoints API (system-wide defaults)
  • Terminal override from the authenticated /terminal/info API (sparse, per-device)
  • Deep-merge: terminal values override root, unset fields inherit root
  • Server pushes FORCE_REFRESH via WebSocket for instant config updates
  • Configurable: gateways, tips, fees, standby, timezone, feature flags, timeouts

Over-the-Air Updates

Self-updating without an app store. SHA-256 verified. Presigned S3 URLs.

  • Fetches manifest from GET /api/v1/app/manifest?flavor=payus
  • Compares versionCode against installed build
  • Streams APK to disk with progress bar — never loads into memory
  • SHA-256 hash verification before installing
  • Presigned S3 URLs expire after 1 hour
  • Mandatory flag forces update before terminal can be used

Enterprise Security

Root detection, encrypted storage, JWT + HMAC auth, environment segregation.

  • Root and jailbreak detection on every cold start
  • AES-256-GCM encrypted storage (Android EncryptedSharedPreferences)
  • JWT Bearer tokens for all API calls
  • OAuth 2.0 Client Credentials flow for token refresh
  • HMAC signing for LAN inter-terminal commands
  • Switching environments clears all auth data — prevents credential leaks

Security at every layer

AES-256-GCMEncrypted Storage
JWT + OAuth 2.0Token Auth
HMAC-SHA256Request Signing
Root DetectionDevice Integrity